A Multi-Factor Security Protocol for Wireless Payment - Secure Web Authentication using Mobile Devices

TL;DR

This paper introduces a multi-factor security protocol for wireless payments that combines transaction identification codes and SMS to enhance security and usability without requiring infrastructure changes.

Contribution

It presents a novel multifactor authentication protocol using Transaction Identification Codes and SMS for secure wireless web authentication.

Findings

Enhanced security with multi-factor authentication

No infrastructure changes needed

Extended protocol supports two-way authentication

Abstract

Previous Web access authentication systems often use either the Web or the Mobile channel individually to confirm the claimed identity of the remote user. This paper proposes a new protocol using multifactor authentication system that is both secure and highly usable. It uses a novel approach based on Transaction Identification Code and SMS to enforce extra security level with the traditional Login/password system. The system provides a highly secure environment that is simple to use and deploy, that does not require any change in infrastructure or protocol of wireless networks. This Protocol for Wireless Payment is extended to provide two way authentications.